Assistant General Counsel - Cyber, Privacy & Technology

Leidos•Reston, VA

1d•Hybrid

About The Position

Leidos is seeking a dynamic, experienced, and business-oriented attorney to serve as Assistant General Counsel – Cyber, Privacy & Technology. Reporting to the SVP/Deputy General Counsel, Cyber, Privacy & Emerging Technologies (and Chief Privacy Officer), this position provides strategic and operational legal support across the hottest legal issues in cybersecurity, data privacy, artificial intelligence, and data governance. This role offers hands-on involvement across the full lifecycle of cyber, privacy and technology matters—from issue spotting and risk assessment to solution design, incident response, and program implementation. The successful candidate will advise corporate operations and customer-facing business teams, supporting highly regulated, mission-critical environments where cybersecurity, data protection, and ethical AI practices are foundational to trust and contract performance. The attorney will partner closely with stakeholders across Human Resources, CIO Services/Information Security, Contracts & Global Supply Chain, and business sector leadership. The position requires strong legal judgment, business acumen, and the ability to translate complex regulatory and contractual requirements into practical guidance for technical and operational teams. This is a hybrid position with 2-3 days onsite work. Candidates must live within commuting distance to our headquarters in Reston, Virginia.

Requirements

Juris Doctor from a U.S. accredited law school
Membership in the Virginia State Bar or the ability to become registered in-house counsel in Virginia.
Minimum of 6+ years of legal experience advising on cybersecurity, data privacy, technology, and/or information security matters, preferably in a law firm, in-house, or government environment.
Working knowledge of U.S. privacy and data protection laws and frameworks (e.g., HIPAA, state privacy laws) and familiarity with international regimes such as GDPR and UK GDPR.
Experience advising on incident response and data breaches, including notification and reporting considerations.
Experience reviewing, drafting, and negotiating privacy, cybersecurity, and technology-related contractual provisions.
Superior written and verbal communication skills
Excellent organizational skills
Agility and willingness to work on a broad range of matters
Self-motivated and ability to work independently without extensive supervision
Ability to translate legal requirements into practical guidance for non-lawyers

Nice To Haves

Familiarity with government contracting environments and related regulatory or flow-down requirements preferred.

Responsibilities

Provide practical, risk-based legal advice on cybersecurity, data privacy, artificial intelligence, and emerging technologies across corporate and customer-facing operations.
Advise stakeholders on compliance with U.S. and international privacy, cybersecurity, AI, and data protection laws, regulations, standards, and contractual obligations, including government contracting requirements and flow-down provisions.
Review, draft, and negotiate cybersecurity, privacy, AI, and data protection provisions in customer, vendor, subcontractor, and technology agreements, including data processing agreements, Business Associate Agreements, and data security addenda.
Interpret and operationalize complex regulatory and contractual requirements, translating them into clear, actionable guidance for business and technical teams.
Partner with internal stakeholders to manage and mitigate cybersecurity incidents and data breaches, including advising on notification, reporting, and related contractual and regulatory obligations and managing outside counsel as appropriate.
Support the development, implementation, and continuous improvement of the company’s privacy program, ensuring alignment with information security, AI, and other governance and compliance functions.